CVE-2022-0742 Memory leak in ICMP6 in Linux Kernel

2022-03-1811:20:11

CWE-275

Google

www.cve.org

memory leak

linux kernel

dos

icmp6

remote attacker

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

8.4

Confidence

High

EPSS

0.004

Percentile

72.5%

JSON

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

CNA Affected

[
  {
    "product": "Kernel",
    "vendor": "Linux",
    "versions": [
      {
        "lessThanOrEqual": "5.13",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]